Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
File: JUn0XvILUG6o70y2gsLKJwGykLQ.mft (raw, json)
Hash identifier: Q9yFrsnI1hSN2c28YFQF09tYfPxnEaIjnektR+A9ZHU=
Subject key identifier: 6B:EC:49:25:D0:A5:AB:C9:E4:98:F3:E3:DE:FA:D3:9A:7E:C8:D4:A3
Authority key identifier: 25:49:F4:5E:F2:0B:50:6E:A8:EF:4C:B6:82:C2:CA:27:01:B2:90:B4
Certificate issuer: /CN=2549f45ef20b506ea8ef4cb682c2ca2701b290b4
Certificate serial: 019768F30C1A6520AB3ACAF5797DD6A9F086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 11:00:48 +0000
Manifest this update: Fri 13 Jun 2025 11:00:48 +0000
Manifest next update: Sat 14 Jun 2025 11:00:48 +0000
Files and hashes: 1: IkDVoWMCW8T1OT9ORyQk9bDyazo.roa (hash: ezW06KpxDOFFcxPPKXXfQ4CRQ3FYkfmYYJN8bIHB94g=)
2: JUn0XvILUG6o70y2gsLKJwGykLQ.crl (hash: czmGqlQrKswLUsHgNGaAyR6l1+G4gHlyLD0aQxBYa0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f3:0c:1a:65:20:ab:3a:ca:f5:79:7d:d6:a9:f0:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2549f45ef20b506ea8ef4cb682c2ca2701b290b4
Validity
Not Before: Jun 13 11:00:48 2025 GMT
Not After : Jun 14 11:00:48 2025 GMT
Subject: CN=6bec4925d0a5abc9e498f3e3defad39a7ec8d4a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a0:ac:b8:90:9d:af:fe:67:8c:29:dd:51:2a:
f9:7b:8a:20:f1:4c:cb:e2:7b:25:86:25:b6:a5:ca:
a5:ad:d3:90:ad:df:de:55:64:15:03:e5:d1:15:c7:
1d:e3:fe:1f:b5:a7:25:7c:04:d3:90:d6:1b:aa:26:
37:cf:c8:d1:79:3e:91:8e:d1:ff:6a:63:1c:4c:4e:
69:ff:e4:8e:4a:16:3a:07:f7:6a:f7:59:b3:57:fb:
ac:03:cb:4c:cd:54:b8:48:35:92:ab:75:9e:a7:67:
a0:b6:cd:ff:b4:5c:39:98:3f:ff:e4:d7:c5:af:fb:
f7:7b:a8:24:7f:cc:66:bd:01:d6:cb:8a:fa:9a:d7:
e9:b7:9a:54:a3:29:6c:13:6c:ee:a1:56:8f:ac:69:
c5:38:56:46:c9:32:6d:79:20:44:14:d6:8d:bf:6b:
be:8e:2e:17:6a:26:85:9f:95:23:70:6b:bb:10:5d:
9f:b0:76:a2:a4:81:24:f5:56:92:3b:30:a1:34:d7:
72:e1:1c:e0:51:cc:3c:eb:85:ce:5e:25:88:95:3f:
1a:5a:aa:f4:10:6f:4c:39:4d:93:a9:2b:4b:b9:cc:
7b:71:9a:a4:bb:ba:c1:5d:eb:e0:5b:27:88:bd:b4:
2a:77:b2:f9:9d:36:7f:3b:97:02:05:2b:8a:be:05:
e8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:EC:49:25:D0:A5:AB:C9:E4:98:F3:E3:DE:FA:D3:9A:7E:C8:D4:A3
X509v3 Authority Key Identifier:
keyid:25:49:F4:5E:F2:0B:50:6E:A8:EF:4C:B6:82:C2:CA:27:01:B2:90:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:da:8c:d8:be:8f:95:2d:c0:e0:90:3d:bf:ce:5c:7a:bb:47:
b0:82:5c:7a:34:bc:4b:28:64:09:fd:09:28:a9:44:81:e2:ee:
53:27:02:5e:f8:ed:0b:50:6d:5c:fd:f6:e9:0e:47:cb:43:fc:
73:d9:8e:05:e6:57:a0:79:03:b6:5e:16:65:ad:a5:62:06:3a:
bc:6f:0f:58:7b:d9:42:e4:a0:5b:34:ea:0a:c1:aa:81:50:4a:
f7:5d:10:3c:bc:f5:ef:60:7e:a2:75:ce:e5:e0:0d:b0:12:97:
37:45:1b:f4:70:1c:86:b4:eb:20:72:2f:b9:61:f1:07:66:71:
3f:38:5d:bc:6e:e5:80:0a:73:e7:9c:8c:50:d4:6a:af:9e:3c:
00:0c:88:6a:5e:29:c5:6a:81:01:49:60:da:a8:c9:89:53:a0:
78:64:ff:0c:62:7d:ad:15:cc:0a:ac:08:db:46:73:0c:58:2f:
ed:6f:c1:6e:ca:3d:7b:14:61:93:d5:1a:fe:97:64:1b:80:36:
ee:50:66:fd:c9:f4:0a:c4:31:f6:aa:e1:4e:92:af:d0:ef:b2:
13:d4:dd:6e:9c:9c:0a:e9:7d:96:a5:d3:dd:93:5d:13:fe:38:
45:06:d0:9e:50:7e:15:6e:e3:60:f5:d8:72:32:91:ba:2c:d3:
bd:77:2b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:53 2025 by rpki-client